
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
File: 25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json)
Hash identifier: MnEbkcAxOjl8qWeQUWgHfFrQ+CaLRVTlpQk1fYMK/+o=
Subject key identifier: E9:7F:16:35:9B:EB:E4:C7:40:CE:85:3C:E9:A9:03:F7:5F:03:97:6D
Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12
Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
Certificate serial: 1E17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
Manifest number: 1E09
Signing time: Tue 06 Oct 2026 16:06:18 +0000
Manifest this update: Tue 06 Oct 2026 16:06:18 +0000
Manifest next update: Tue 13 Oct 2026 16:06:18 +0000
Files and hashes: 1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: DfXAuE2OguISoXXg2DeMjYYDyecNPLF7TVlWE2VlukY=)
2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: bYaDtLZITXZD32x/G/ifQ4D5B/vhmcgFX9IrYx2NC+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl
rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7703 (0x1e17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
Validity
Not Before: Oct 6 16:06:18 2026 GMT
Not After : Oct 13 16:06:18 2026 GMT
Subject: CN=6ac51c7a-3f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:08:96:2f:46:ed:65:07:42:29:15:24:70:
60:bd:b0:47:b3:d5:2f:59:bb:d7:99:f4:03:d5:2d:
a4:36:38:5b:69:c3:7c:a9:b0:93:bb:ff:95:26:8e:
ae:07:23:bc:02:d9:d0:2c:36:92:04:f1:8f:44:09:
9a:71:fa:ca:ab:d0:ce:aa:d0:7e:b3:5c:6d:6c:b1:
63:b1:8a:23:15:b7:d4:05:68:b4:27:b8:73:33:09:
e1:25:f7:12:e9:44:85:98:38:55:ac:6f:b0:3c:0d:
27:05:ab:fa:c1:46:5a:33:5a:07:ef:c5:61:42:2b:
f1:20:17:d7:73:c2:28:00:15:31:65:72:10:01:b5:
b2:3a:c6:b8:54:79:5c:4e:a6:43:f7:19:bb:fe:9b:
b9:d1:91:74:9b:a6:9b:8e:2c:e3:58:c5:57:59:5a:
a5:a4:6b:dc:f6:96:7e:db:87:c5:6c:f3:f1:56:77:
a5:19:da:53:89:c0:f4:19:39:b3:da:50:57:65:70:
17:40:fb:8c:6c:f8:ab:92:8a:67:d9:56:60:95:d7:
e5:28:e6:b1:0c:ad:22:b9:74:66:30:cc:39:cd:7f:
3b:9d:a7:e8:ea:f8:a2:5b:1e:48:89:f6:21:68:c7:
d5:68:a8:5c:43:b8:88:ea:9a:9e:46:c2:94:61:c3:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7F:16:35:9B:EB:E4:C7:40:CE:85:3C:E9:A9:03:F7:5F:03:97:6D
X509v3 Authority Key Identifier:
keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cf:53:54:97:8e:b5:18:e9:3e:a1:8e:3a:94:af:a3:d4:af:
6b:4f:db:10:d5:ca:9d:cf:ed:a6:b9:1b:69:cf:ce:b8:16:2a:
90:50:76:c4:dc:22:27:65:a3:f7:55:e4:87:a3:6c:e9:53:96:
14:0f:07:62:9b:c6:80:bd:3d:79:40:cd:bd:30:c1:07:ac:fb:
2e:0b:60:cf:b3:36:39:d0:ff:e3:cb:0b:4b:95:a3:47:12:5d:
72:00:5c:72:ca:be:63:e1:03:06:05:0f:d3:ad:55:56:8e:25:
82:c0:7a:41:0b:fa:72:15:09:70:60:ec:2d:90:e3:8e:f0:45:
c4:a7:da:fe:0d:6c:47:42:36:68:96:89:6b:cd:1f:e9:93:40:
12:7a:78:f9:0b:f4:f8:1b:b0:7b:a2:e9:f4:e5:68:54:48:44:
ce:7c:f7:43:13:3a:3d:e5:03:9e:35:32:25:61:d6:b0:38:3f:
79:4c:d8:f8:5f:21:f1:50:2b:be:3f:47:5d:c3:fb:1e:8b:2b:
cf:01:86:47:99:10:2f:88:9a:e4:55:c8:22:18:db:f9:38:0c:
7b:6d:b4:b9:cb:30:b7:1b:d1:d7:1f:12:de:d7:96:34:84:4d:
04:93:6c:cd:bd:3b:18:c7:bb:b3:69:f3:0a:fe:1d:1d:5d:8d:
cd:3a:ef:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:57:28 2026 by rpki-client